Attachment 15206 Details for Bug 13980 – output of "samba-tool fsmo transfer" showing errors

output of "samba-tool fsmo transfer" showing errors

fsmo-transfer.log (text/x-log), 9.72 KB, created by Val Kulkov on 2019-05-30 16:55:19 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Val Kulkov

Created: 2019-05-30 16:55:19 UTC

Size: 9.72 KB

patch

obsolete

>================= PART 1 - ERROR =================
>
>[root@HPG7 private]# samba-tool fsmo transfer --role=all
>FSMO transfer of 'rid' role successful
>FSMO transfer of 'pdc' role successful
>FSMO transfer of 'naming' role successful
>FSMO transfer of 'infrastructure' role successful
>FSMO transfer of 'schema' role successful
>GENSEC backend 'gssapi_spnego' registered
>GENSEC backend 'gssapi_krb5' registered
>GENSEC backend 'gssapi_krb5_sasl' registered
>GENSEC backend 'spnego' registered
>GENSEC backend 'schannel' registered
>GENSEC backend 'naclrpc_as_system' registered
>GENSEC backend 'sasl-EXTERNAL' registered
>GENSEC backend 'ntlmssp' registered
>GENSEC backend 'ntlmssp_resume_ccache' registered
>GENSEC backend 'http_basic' registered
>GENSEC backend 'http_ntlm' registered
>GENSEC backend 'http_negotiate' registered
>GENSEC backend 'krb5' registered
>GENSEC backend 'fake_gssapi_krb5' registered
>Starting GENSEC mechanism spnego
>Starting GENSEC submechanism gssapi_krb5
>gensec_update_send: gssapi_krb5[0x558a7b8130d0]: subreq: 0x558a7c4922e0
>gensec_update_send: spnego[0x558a7ba3a330]: subreq: 0x558a7b522020
>gensec_update_done: gssapi_krb5[0x558a7b8130d0]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x558a7c4922e0/../../source4/auth/gensec/gensec_gssapi.c:1055]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x558a7c492490)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1065]
>gensec_update_done: spnego[0x558a7ba3a330]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x558a7b522020/../../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)]  state[struct gensec_spnego_update_state (0x558a7b5221d0)] timer[(nil)] finish[../../auth/gensec/spnego.c:2070]
>gensec_update_send: gssapi_krb5[0x558a7b8130d0]: subreq: 0x558a7c4922e0
>gensec_update_send: spnego[0x558a7ba3a330]: subreq: 0x558a7b522020
>gensec_update_done: gssapi_krb5[0x558a7b8130d0]: NT_STATUS_OK tevent_req[0x558a7c4922e0/../../source4/auth/gensec/gensec_gssapi.c:1055]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x558a7c492490)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1072]
>gensec_update_done: spnego[0x558a7ba3a330]: NT_STATUS_OK tevent_req[0x558a7b522020/../../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)]  state[struct gensec_spnego_update_state (0x558a7b5221d0)] timer[(nil)] finish[../../auth/gensec/spnego.c:2070]
>ERROR: Failed to delete role 'domaindns': LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS -  <00002098: Object CN=Infrastructure,DC=DomainDnsZones,DC=home,DC=kkf has no write property access
>> <>
>[root@HPG7 private]# samba-tool fsmo transfer --role=all -Uadministrator
>This DC already has the 'rid' FSMO role
>This DC already has the 'pdc' FSMO role
>This DC already has the 'naming' FSMO role
>This DC already has the 'infrastructure' FSMO role
>This DC already has the 'schema' FSMO role
>GENSEC backend 'gssapi_spnego' registered
>GENSEC backend 'gssapi_krb5' registered
>GENSEC backend 'gssapi_krb5_sasl' registered
>GENSEC backend 'spnego' registered
>GENSEC backend 'schannel' registered
>GENSEC backend 'naclrpc_as_system' registered
>GENSEC backend 'sasl-EXTERNAL' registered
>GENSEC backend 'ntlmssp' registered
>GENSEC backend 'ntlmssp_resume_ccache' registered
>GENSEC backend 'http_basic' registered
>GENSEC backend 'http_ntlm' registered
>GENSEC backend 'http_negotiate' registered
>GENSEC backend 'krb5' registered
>GENSEC backend 'fake_gssapi_krb5' registered
>Starting GENSEC mechanism spnego
>Starting GENSEC submechanism gssapi_krb5
>Password for [HOME\administrator]:
>gensec_update_send: gssapi_krb5[0x5601e6c74630]: subreq: 0x5601e6b19930
>gensec_update_send: spnego[0x5601e6dca7d0]: subreq: 0x5601e682bbb0
>gensec_update_done: gssapi_krb5[0x5601e6c74630]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x5601e6b19930/../../source4/auth/gensec/gensec_gssapi.c:1055]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x5601e6b19ae0)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1065]
>gensec_update_done: spnego[0x5601e6dca7d0]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x5601e682bbb0/../../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)]  state[struct gensec_spnego_update_state (0x5601e682bd60)] timer[(nil)] finish[../../auth/gensec/spnego.c:2070]
>gensec_update_send: gssapi_krb5[0x5601e6c74630]: subreq: 0x5601e6b19930
>gensec_update_send: spnego[0x5601e6dca7d0]: subreq: 0x5601e682bbb0
>gensec_update_done: gssapi_krb5[0x5601e6c74630]: NT_STATUS_OK tevent_req[0x5601e6b19930/../../source4/auth/gensec/gensec_gssapi.c:1055]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x5601e6b19ae0)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1072]
>gensec_update_done: spnego[0x5601e6dca7d0]: NT_STATUS_OK tevent_req[0x5601e682bbb0/../../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)]  state[struct gensec_spnego_update_state (0x5601e682bd60)] timer[(nil)] finish[../../auth/gensec/spnego.c:2070]
>ERROR(<class 'AttributeError'>): uncaught exception - module 'samba' has no attribute 'drs_utils'
>  File "/usr/lib/python3.7/site-packages/samba/netcmd/__init__.py", line 185, in _run
>    return self.run(*args, **kwargs)
>  File "/usr/lib/python3.7/site-packages/samba/netcmd/fsmo.py", line 526, in run
>    "domaindns", samdb)
>  File "/usr/lib/python3.7/site-packages/samba/netcmd/fsmo.py", line 134, in transfer_dns_role
>    except samba.drs_utils.drsException as e:
>
>================= PART 2 - SUCCESS =================
>
>[root@HPG7 private]# samba-tool fsmo transfer --role=all -Uadministrator
>This DC already has the 'rid' FSMO role
>This DC already has the 'pdc' FSMO role
>This DC already has the 'naming' FSMO role
>This DC already has the 'infrastructure' FSMO role
>This DC already has the 'schema' FSMO role
>This DC already has the 'domaindns' FSMO role
>GENSEC backend 'gssapi_spnego' registered
>GENSEC backend 'gssapi_krb5' registered
>GENSEC backend 'gssapi_krb5_sasl' registered
>GENSEC backend 'spnego' registered
>GENSEC backend 'schannel' registered
>GENSEC backend 'naclrpc_as_system' registered
>GENSEC backend 'sasl-EXTERNAL' registered
>GENSEC backend 'ntlmssp' registered
>GENSEC backend 'ntlmssp_resume_ccache' registered
>GENSEC backend 'http_basic' registered
>GENSEC backend 'http_ntlm' registered
>GENSEC backend 'http_negotiate' registered
>GENSEC backend 'krb5' registered
>GENSEC backend 'fake_gssapi_krb5' registered
>Starting GENSEC mechanism spnego
>Starting GENSEC submechanism gssapi_krb5
>Password for [HOME\administrator]:
>gensec_update_send: gssapi_krb5[0x56538808cc30]: subreq: 0x565387a95740
>gensec_update_send: spnego[0x565388568510]: subreq: 0x565387c79a10
>gensec_update_done: gssapi_krb5[0x56538808cc30]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x565387a95740/../../source4/auth/gensec/gensec_gssapi.c:1055]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x565387a958f0)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1065]
>gensec_update_done: spnego[0x565388568510]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x565387c79a10/../../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)]  state[struct gensec_spnego_update_state (0x565387c79bc0)] timer[(nil)] finish[../../auth/gensec/spnego.c:2070]
>gensec_update_send: gssapi_krb5[0x56538808cc30]: subreq: 0x565387a95740
>gensec_update_send: spnego[0x565388568510]: subreq: 0x565387c79a10
>gensec_update_done: gssapi_krb5[0x56538808cc30]: NT_STATUS_OK tevent_req[0x565387a95740/../../source4/auth/gensec/gensec_gssapi.c:1055]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x565387a958f0)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1072]
>gensec_update_done: spnego[0x565388568510]: NT_STATUS_OK tevent_req[0x565387c79a10/../../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)]  state[struct gensec_spnego_update_state (0x565387c79bc0)] timer[(nil)] finish[../../auth/gensec/spnego.c:2070]
>Starting GENSEC mechanism spnego
>Starting GENSEC submechanism gssapi_krb5
>gensec_update_send: gssapi_krb5[0x565387c97ca0]: subreq: 0x5653888a5aa0
>gensec_update_send: spnego[0x5653888cddb0]: subreq: 0x565387c79a10
>gensec_update_done: gssapi_krb5[0x565387c97ca0]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x5653888a5aa0/../../source4/auth/gensec/gensec_gssapi.c:1055]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x5653888a5c50)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1065]
>gensec_update_done: spnego[0x5653888cddb0]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x565387c79a10/../../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)]  state[struct gensec_spnego_update_state (0x565387c79bc0)] timer[(nil)] finish[../../auth/gensec/spnego.c:2070]
>gensec_update_send: gssapi_krb5[0x565387c97ca0]: subreq: 0x565387c34720
>gensec_update_send: spnego[0x5653888cddb0]: subreq: 0x565387c79a10
>gensec_update_done: gssapi_krb5[0x565387c97ca0]: NT_STATUS_OK tevent_req[0x565387c34720/../../source4/auth/gensec/gensec_gssapi.c:1055]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x565387c348d0)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1072]
>gensec_update_done: spnego[0x5653888cddb0]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x565387c79a10/../../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)]  state[struct gensec_spnego_update_state (0x565387c79bc0)] timer[(nil)] finish[../../auth/gensec/spnego.c:2070]
>gensec_update_send: spnego[0x5653888cddb0]: subreq: 0x565387c79a10
>gensec_update_done: spnego[0x5653888cddb0]: NT_STATUS_OK tevent_req[0x565387c79a10/../../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)]  state[struct gensec_spnego_update_state (0x565387c79bc0)] timer[(nil)] finish[../../auth/gensec/spnego.c:2070]
>Sealed 128 bytes, and got 76 bytes header/signature.
>Unsealed 64 bytes, with 76 bytes header/signature.
>Sealed 192 bytes, and got 76 bytes header/signature.
>Unsealed 16 bytes, with 76 bytes header/signature.
>FSMO transfer of 'forestdns' role successful
>

Actions: View

Attachments on bug 13980: 15206 | 15207